How do I use my organization's MS 365 credentials to log into a WiFi (using Foxpass), without disabling our MFA policies?

Question

So, I have set up 2 Foxpass Apps. One uses OAuth and the other uses SAML. I'm trying to make sure that my WiFi (set up using Meraki, which contains the Foxpass Radius Client's IP address with a secret on Port 1812), is able to authenticate users using their MS 365 credentials. This is an office wifi.

Our company has a mandatory MFA policy that cannot be changed. I've created a seperate policy that allows MFA for Foxpass Apps (both, OAuth and SAML). The reason I created both apps, was because I found conflicting answers on which one would work with MFA enabled. Just to be clear, I do not want MFA to pop up when users are trying to log in to the wifi. Hence the policies I created exclude these two apps. In the Network section, I added the IPs from here (https://docs.foxpass.com/docs/delegated-authentication-ip-addresses), and I chose Singapore as I'm based in Australia and it is closest.

I've set up the Foxpass config properly and even verified it with the Foxpass support. However, everytime I try to log in, the Sign In Logs on my MS 365 Admin Dashboard, under Activity Details: Sign In > Authentication Details , still says "MFA required in Azure AD". The logs on my Foxpass dashboard say, "Office365 OAuth error: 400 code returned - AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'." I even tried excluding my log in user from the 4 Microsoft Policies and 1 Foxpass Exclusion policy. Yet, I am getting the same issue.

Could somebody help me with this?

Answer 1

Hi @ShiveshBhat-5735 ,

Thank you for posting your question in the Microsoft Q&A forum.

You can try to use app passwords for applications that do not support MFA.

Please check this article for more details about get app passwords:

How to get and use app passwords - Microsoft Support

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.